This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json) Hash identifier: SSI7ms+TH752MyEkbDiLY5IsGiJ0pE9TvrDuAo5ii4c= Subject key identifier: 6C:3E:03:82:6C:37:B4:72:46:B2:BD:F4:63:6E:D5:A0:9B:7C:F8:D4 Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Certificate serial: 019B4ADF3A4097CA5F33A17B4755FD4A08C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft Manifest number: 0781 Signing time: Tue 23 Dec 2025 11:01:41 +0000 Manifest this update: Tue 23 Dec 2025 11:01:41 +0000 Manifest next update: Wed 24 Dec 2025 11:01:41 +0000 Files and hashes: 1: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: SMQrdLJCgcwdqFHis/5tZGgwN5b3DG5fDhvasNMSxPQ=) 2: PFluydWOaBTgnh4o2FnGy8AoCI0.roa (hash: dYpglGU9LkXsNL5grxQDMbO9Dj9URsF+c2voMiQoHR0=) 3: eQf0fzT1TpCrCtQpX64ANEQyzhI.roa (hash: HlHU7MK+aLw3ArQHYGvb135KcLlwl9X+zO2+NofGyyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:3a:40:97:ca:5f:33:a1:7b:47:55:fd:4a:08:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0 Validity Not Before: Dec 23 11:01:41 2025 GMT Not After : Dec 24 11:01:41 2025 GMT Subject: CN=6c3e03826c37b47246b2bdf4636ed5a09b7cf8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:f5:6f:d9:b2:ce:64:9a:58:3f:08:7b:c5: 01:d9:7c:8f:55:34:d2:bc:ac:4a:34:44:ae:33:0d: e7:ee:cc:80:7a:b6:11:09:26:4e:f9:ff:ca:30:2c: ac:a9:80:33:e8:28:c9:e3:7e:c1:32:e1:01:c8:92: df:a3:e6:ca:94:6c:72:b0:1b:ee:d9:39:20:7b:b0: e8:fd:a5:3e:26:e4:41:30:cd:27:da:6c:59:8a:41: 3e:df:c0:5c:7b:34:c6:67:ba:d4:67:34:87:cb:2e: 63:16:aa:b9:e6:c0:6d:97:c3:9a:6e:d1:fc:a9:b4: 2a:3a:14:70:37:96:ae:4a:66:c0:b1:bc:6d:f6:b0: ff:c4:66:c4:65:ce:d2:74:e2:19:e2:a5:b5:dc:c4: f7:58:c8:21:a2:3b:87:84:7c:85:ea:16:80:d5:e9: d5:ac:1c:d5:0e:a7:bf:e9:21:a2:5c:77:94:bc:24: 17:07:c9:20:cf:f4:18:d5:d4:01:c5:8d:01:bc:59: 7c:28:93:24:85:ea:10:af:f4:7b:1c:07:9d:1b:bb: 51:fa:5e:29:7f:60:01:04:74:7c:74:e6:95:97:dc: c9:dc:e3:6b:57:48:f8:77:0e:bf:71:66:1b:1e:54: 07:13:d7:ee:14:94:73:7e:51:f3:04:d4:8d:ac:c5: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3E:03:82:6C:37:B4:72:46:B2:BD:F4:63:6E:D5:A0:9B:7C:F8:D4 X509v3 Authority Key Identifier: keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:fe:9f:c2:04:0d:f6:bf:86:5c:fa:a6:ec:d4:ef:85:12:a6: 99:2c:51:93:a9:87:6f:77:18:c9:6e:6d:8a:79:b4:61:f4:fe: b4:6e:e2:64:7e:5d:60:5a:2b:c9:43:0e:b2:60:b1:b8:58:fb: 8c:cc:26:42:fd:2d:22:c2:47:43:4c:ce:3c:2f:91:1e:07:fc: 72:fc:cc:23:2c:44:8a:75:5b:99:d6:21:80:9f:6e:58:1b:33: 25:65:68:d4:cf:39:09:71:a9:89:d7:35:3c:44:17:5c:24:87: 74:70:e2:9c:42:5d:e9:11:b2:8f:38:99:93:70:9d:83:68:ec: 36:36:6e:5a:f8:82:8e:3a:2b:9d:4d:ca:e4:d2:2f:33:57:89: b8:4b:08:5e:a7:9b:60:b4:42:7f:82:14:1d:c4:dd:3d:d2:45: 1c:3b:fe:28:93:73:d4:a3:e9:45:33:84:7c:dc:72:ba:5f:52: c3:0d:fc:c5:2c:61:b3:63:c1:dc:72:c7:4c:5a:69:9c:2c:ca: ee:21:fd:7c:a0:16:30:56:01:d3:69:07:de:3a:1c:b0:63:61: e4:53:51:a9:f6:0e:22:e2:d2:b9:17:af:95:cf:d0:99:3a:ed: d4:aa:a6:68:f3:d7:de:d3:62:81:76:fc:d5:18:72:4d:bc:db: 2f:ec:d8:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3zpAl8pfM6F7R1X9SgjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMGQ2MjEyOWQwMjA2M2Q0MDllYmZiMDFjNjQ4ZDQ2ZjM0 ODg5ZTAwHhcNMjUxMjIzMTEwMTQxWhcNMjUxMjI0MTEwMTQxWjAzMTEwLwYDVQQD Eyg2YzNlMDM4MjZjMzdiNDcyNDZiMmJkZjQ2MzZlZDVhMDliN2NmOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+L1b9myzmSaWD8Ie8UB2XyPVTTS vKxKNESuMw3n7syAerYRCSZO+f/KMCysqYAz6CjJ437BMuEByJLfo+bKlGxysBvu 2Tkge7Do/aU+JuRBMM0n2mxZikE+38BcezTGZ7rUZzSHyy5jFqq55sBtl8OabtH8 qbQqOhRwN5auSmbAsbxt9rD/xGbEZc7SdOIZ4qW13MT3WMghojuHhHyF6haA1enV rBzVDqe/6SGiXHeUvCQXB8kgz/QY1dQBxY0BvFl8KJMkheoQr/R7HAedG7tR+l4p f2ABBHR8dOaVl9zJ3ONrV0j4dw6/cWYbHlQHE9fuFJRzflHzBNSNrMXBBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw+A4JsN7RyRrK99GNu1aCbfPjUMB8GA1UdIwQY MBaAFC0NYhKdAgY9QJ6/sBxkjUbzSIngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2Et MWRhZWE0YmM5NGIzLzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wNjBmN2UtOGNmMC00ZWMyLWFmN2EtMWRhZWE0YmM5NGIz LzEvTFExaUVwMENCajFBbnItd0hHU05Sdk5JaWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFP6fwgQN 9r+GXPqm7NTvhRKmmSxRk6mHb3cYyW5tinm0YfT+tG7iZH5dYForyUMOsmCxuFj7 jMwmQv0tIsJHQ0zOPC+RHgf8cvzMIyxEinVbmdYhgJ9uWBszJWVo1M85CXGpidc1 PEQXXCSHdHDinEJd6RGyjziZk3Cdg2jsNjZuWviCjjornU3K5NIvM1eJuEsIXqeb YLRCf4IUHcTdPdJFHDv+KJNz1KPpRTOEfNxyul9Sww38xSxhs2PB3HLHTFppnCzK 7iH9fKAWMFYB02kH3jocsGNh5FNRqfYOIuLSuRevlc/QmTrt1KqmaPPX3tNigXb8 1RhyTbzbL+zYmg== -----END CERTIFICATE-----Generated at Tue Dec 23 15:50:02 2025 by rpki-client